EUROPEAN DIPLOMATS TARGETED BY SPIKEDWINE WITH WINELOADER

Summary from the TLDR InfoSec newsletter

An invitation to a wine-tasting event was discovered to be part of a targeted spearphishing campaign that distributed a new stealthy backdoor called WINELOADER to European diplomats. The invitation included a malicious link to a fake questionnaire - targets were told that the questionnaire must be filled out in order to participate in the event. The link redirected to a compromised site that downloaded a file containing obfuscated JavaScript code to execute the attack.